If you scan your fresh new HP Server with Nessus you might get a "58751 - SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability" on Port 2381 but how to fix it?

The message above is in correlation to the vulnerability CVE-2011-3389 and is called "BEAST attack" if you search for in the Internet. It is a "SSLv3.0/TLSv1.0 Protocol Weak CBC Mode Vulnerability" and to fix that in the HP System Management on the affected server you need to disable "block ciphers". This can be done via the following command on the affected Server:

If you got a error message like "Input is not proper UTF-8, indicate encoding!" you need to check the mentioned XML which is normally C:/hp/hpsmh/conf/smhpd.xml. It could be that you used the wrong apostrophe in the command above which is now in the xml file. You can fix that with Notepad directly on the server if needed.